Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 44 Exim Critical Information Disclosure CVE-2026-48840

fedora
Calendar Grey June 9, 2026
Dist Fedora Esm H88
Update for Fedora 44 fixing CVE-2026-48840 pre-auth information disclosure in exim mail agent.
This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).

Summary

Exim is a message transfer agent (MTA) developed at the University of

Cambridge for use on Unix systems connected to the Internet. It is

freely available under the terms of the GNU General Public Licence. In

style it is similar to Smail 3, but its facilities are more

general. There is a great deal of flexibility in the way mail can be

routed, and there are extensive facilities for checking incoming

mail. Exim can be installed in place of sendmail, although the

configuration of exim is quite different to that of sendmail.

Update Information:

This is an update fixing a pre-authentication information disclosure (CVE-2026-48840).

Topics%20covered

Topics Covered

security advisory fedora critical exim information disclosure pre-authentication

Change Log

* Mon Jun 1 2026 Jaroslav Škarvada - 4.99.4-1 - New version Resolves: rhbz#2483300 Resolves: CVE-2026-48840 * Mon May 18 2026 Jaroslav Škarvada - 4.99.3-1 - New version Resolves: rhbz#2476497

References


[ 1 ] Bug #2483300 - exim-4.99.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2483300 [ 2 ] Bug #2484718 - CVE-2026-48840 exim: Exim: Information disclosure via mishandled short payloads in proxy configurations [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2484718

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-78bf093219' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: exim
Product: Fedora 44
Version: 4.99.4
Release: 1.fc44
URL: https://www.exim.org/
Summary: The exim mail transfer agent

Topics%20covered

Topics Covered

security advisory fedora critical exim information disclosure pre-authentication

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here